This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json) Hash identifier: +AAaDNQL9SwvtvKyEsdqe/rgS3mLzPBIK+yDdhHs2rs= Subject key identifier: 7E:65:48:64:5B:FE:1D:EF:3C:5A:FC:8C:62:DC:67:BA:5B:E6:BA:11 Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681 Certificate serial: 019B1871D41A30889211E0F9284468784B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft Manifest number: 0E2C Signing time: Sat 13 Dec 2025 16:01:11 +0000 Manifest this update: Sat 13 Dec 2025 16:01:11 +0000 Manifest next update: Sun 14 Dec 2025 16:01:11 +0000 Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=) 2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: PQbptRviXLq09NK+Vgms9TVK9WExUFZtJ+hkSrPsbns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:d4:1a:30:88:92:11:e0:f9:28:44:68:78:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681 Validity Not Before: Dec 13 16:01:11 2025 GMT Not After : Dec 14 16:01:11 2025 GMT Subject: CN=7e6548645bfe1def3c5afc8c62dc67ba5be6ba11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:41:6f:59:9c:bb:ef:4d:56:2f:0f:33:1b: a0:8e:4a:20:59:10:fe:bb:1f:0b:f2:b6:2a:a3:7a: 69:9e:79:80:80:fc:23:0f:3d:95:70:ad:ef:6b:28: 32:95:55:21:45:c7:d5:10:85:46:07:83:55:bf:8f: 5b:68:08:88:c7:d1:70:6a:c6:fd:42:36:38:d4:43: 41:d1:81:da:98:1f:aa:31:f8:1c:2b:94:a2:2e:a8: d4:84:09:20:f7:c5:06:a2:30:74:c7:45:0d:b8:de: 36:ad:76:f8:fa:58:80:01:5a:24:8d:ef:81:d2:e4: 1d:64:fe:93:60:9d:47:90:23:91:2e:8b:8a:a3:f9: 1e:6b:f3:57:16:07:40:57:22:11:f3:76:5f:c3:fd: 7f:93:8d:14:8c:19:5a:67:a6:a8:bb:d5:4d:0c:f3: 82:7f:27:b3:be:c2:5f:38:08:80:15:59:b3:3e:ea: 7b:73:a8:70:37:be:40:ee:fc:90:2f:ae:e8:70:7b: f6:cd:9b:8c:58:ec:9c:21:49:e1:4a:61:69:60:ca: 8f:da:16:c5:86:d4:8b:c4:29:50:63:89:00:7d:f6: 33:7c:f6:ed:52:15:16:6a:93:3b:c2:61:50:92:21: 8c:6d:94:c9:c5:6c:9a:af:0e:d8:36:4c:8c:5b:fc: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:65:48:64:5B:FE:1D:EF:3C:5A:FC:8C:62:DC:67:BA:5B:E6:BA:11 X509v3 Authority Key Identifier: keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:33:36:ae:1c:df:93:40:99:e1:12:11:d0:2d:a8:d6:18:05: f7:0d:c1:ea:9d:56:40:3b:f7:aa:5c:ad:1f:2b:8a:3d:80:0d: 32:4c:7f:d5:c5:36:ad:5a:16:ff:2f:1f:71:94:d1:7e:40:ae: ed:03:72:c4:3c:38:05:da:13:ec:b5:28:fb:af:3a:0c:9b:c7: 41:cd:99:60:df:02:be:08:7c:a6:0b:bc:35:8a:df:ab:75:5b: 96:ac:86:42:45:a0:a2:2e:2c:f7:34:5b:56:bc:d2:28:60:e0: 0b:3c:c8:85:8c:d1:87:76:06:f4:5c:58:a3:3b:8e:75:95:f3: 95:81:53:9d:f6:18:b2:08:04:c0:21:22:0c:4e:71:39:ed:6a: ae:30:b2:4b:90:30:f0:b2:c6:d3:32:ac:df:32:55:05:ae:11: 64:37:3f:d1:29:5a:f2:00:63:49:d9:28:af:54:f5:22:d9:bd: 4c:fd:a3:34:e8:85:a1:5b:74:e8:5c:5d:74:d4:54:a5:a0:01: 88:28:f0:34:aa:a3:bc:ea:89:90:4c:6c:51:e7:09:d8:f5:23: f5:8c:c5:8f:b0:7d:77:50:37:0e:94:d8:2c:44:35:76:ba:fc: 65:33:42:53:fc:96:5b:e7:58:d2:bd:5f:37:1a:a3:5f:68:06: 47:00:c6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcdQaMIiSEeD5KERoeEtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1 NzA2ODEwHhcNMjUxMjEzMTYwMTExWhcNMjUxMjE0MTYwMTExWjAzMTEwLwYDVQQD Eyg3ZTY1NDg2NDViZmUxZGVmM2M1YWZjOGM2MmRjNjdiYTViZTZiYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JNBb1mcu+9NVi8PMxugjkogWRD+ ux8L8rYqo3ppnnmAgPwjDz2VcK3vaygylVUhRcfVEIVGB4NVv49baAiIx9Fwasb9 QjY41ENB0YHamB+qMfgcK5SiLqjUhAkg98UGojB0x0UNuN42rXb4+liAAVokje+B 0uQdZP6TYJ1HkCORLouKo/kea/NXFgdAVyIR83Zfw/1/k40UjBlaZ6aou9VNDPOC fyezvsJfOAiAFVmzPup7c6hwN75A7vyQL67ocHv2zZuMWOycIUnhSmFpYMqP2hbF htSLxClQY4kAffYzfPbtUhUWapM7wmFQkiGMbZTJxWyarw7YNkyMW/y+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5lSGRb/h3vPFr8jGLcZ7pb5roRMB8GA1UdIwQY MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzM2rhzf k0CZ4RIR0C2o1hgF9w3B6p1WQDv3qlytHyuKPYANMkx/1cU2rVoW/y8fcZTRfkCu 7QNyxDw4BdoT7LUo+686DJvHQc2ZYN8Cvgh8pgu8NYrfq3VblqyGQkWgoi4s9zRb VrzSKGDgCzzIhYzRh3YG9FxYozuOdZXzlYFTnfYYsggEwCEiDE5xOe1qrjCyS5Aw 8LLG0zKs3zJVBa4RZDc/0Sla8gBjSdkor1T1Itm9TP2jNOiFoVt06FxddNRUpaAB iCjwNKqjvOqJkExsUecJ2PUj9YzFj7B9d1A3DpTYLEQ1drr8ZTNCU/yWW+dY0r1f NxqjX2gGRwDG0g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:51 2025 by rpki-client